in cross-functional collaboration. Familiarity with agile development methodologies and tools. Experience with AI/ML applications in cardiology or diagnostics. Knowledge of cybersecurity and data privacy regulations (e.g., HIPAA, GDPR). Experience with international teams and global product launches. Attributes We Value Creative thinker, proactive problem solver, and passionate about improving patient care through innovative product strategies. More ❯
in cross-functional collaboration. Familiarity with agile development methodologies and tools. Experience with AI/ML applications in cardiology or diagnostics. Knowledge of cybersecurity and data privacy regulations (e.g., HIPAA, GDPR). Experience with international teams and global product launches. Attributes We Value Creative thinker, proactive problem solver, and passionate about improving patient care through innovative product strategies. More ❯
in cross-functional collaboration. Familiarity with agile development methodologies and tools. Experience with AI/ML applications in cardiology or diagnostics. Knowledge of cybersecurity and data privacy regulations (e.g., HIPAA, GDPR). Experience with international teams and global product launches. Attributes We Value Creative thinker, proactive problem solver, and passionate about improving patient care through innovative product strategies. More ❯
in cross-functional collaboration. Familiarity with agile development methodologies and tools. Experience with AI/ML applications in cardiology or diagnostics. Knowledge of cybersecurity and data privacy regulations (e.g., HIPAA, GDPR). Experience with international teams and global product launches. Attributes We Value Creative thinker, proactive problem solver, and passionate about improving patient care through innovative product strategies. More ❯
Nottingham, Nottinghamshire, East Midlands, United Kingdom
Experian Ltd
management along with context Operate as an advocate for Security in interactions with internal and external teams Work with Risk & Compliance teams on audits (e.g., SOC 2, PCI-DSS, HIPAA) and recommend relevant Application Security policy and procedures Contribute to internal and external/client audits, ensuring compliance with security standards Lead projects to implement security technologies enterprise-wide Integrate More ❯
london, south east england, united kingdom Hybrid / WFH Options
Aibidia
a cloud environment Integrating data pipelines with external services through APIs Enforcing data security measures, including encryption and access controls Designing data solutions adhering to regulatory requirements (e.g., GDPR, HIPAA)Implementing metadata repositories for tracking data lineage and dependencies Building data solutions leveraging different data ingestion methods and technologies Skills, Knowledge And Expertise Must have: Experience with cloud-based technologies More ❯
enterprise applications, and endpoint devices Utilise systems management tools such as Google Analytics, or similar for monitoring and asset control Ensure endpoint compliance with healthcare IT security standards, including HIPAAand internal cybersecurity policies Support hardware lifecycle management, including imaging, asset tagging Maintain IT service records via ticketing systems, ensuring SLA compliance and escalation where necessary Assist in the preparation More ❯
Collaborate with software development teams to integrate IAG solutions with existing IT infrastructure and applications. Compliance & Risk Management: Ensure that IAG solutions comply with relevant regulations, such as GDPR, HIPAA, and SOX. Conduct risk assessments related to identity and access management and recommend mitigation strategies. Implement and maintain audit trails and reporting mechanisms to track access and identity-related activities. More ❯
london, south east england, united kingdom Hybrid / WFH Options
Vanta
vision to restore trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAAand ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making security continuous—not just a point-in-time check More ❯
of concepts, technical solutions, and prototypes. Strong grasp of Operational Risk practices. Proven ability to design holistic architectural roadmaps and blueprints. Exposure to regulatory frameworks such as DORA, SOX, HIPAA, and CSRD. Knowledge of architectural frameworks (e.g., TOGAF) and systems/data integration. Effective communicator with strong stakeholder management skills. Product-centric architect embedded within the engineering lifecycle. Hands-on More ❯
the firm, including General Counsel, Information Security, and Emerging Tech Risk teams, helping to shape best practices and ensure compliance with regulations such as UK/EU GDPR, DORA, HIPAA, and EU AI Act. The role offers a dynamic mix of hands-on risk management, internal auditing, and strategic input into global processes. It’s ideal for someone with a … General Counsel on data sourcing and best practice Ideal Profile: 2–5 years’ experience in data protection, risk, or compliance Strong working knowledge of UK/EU GDPR, DORA, HIPAA, and ISO27001 Experience in professional services (law firm experience is a plus) Confident stakeholder engagement and communication skills *Visa sponsorship is not available for this position More ❯
the firm, including General Counsel, Information Security, and Emerging Tech Risk teams, helping to shape best practices and ensure compliance with regulations such as UK/EU GDPR, DORA, HIPAA, and EU AI Act. The role offers a dynamic mix of hands-on risk management, internal auditing, and strategic input into global processes. It’s ideal for someone with a … General Counsel on data sourcing and best practice Ideal Profile: 2–5 years’ experience in data protection, risk, or compliance Strong working knowledge of UK/EU GDPR, DORA, HIPAA, and ISO27001 Experience in professional services (law firm experience is a plus) Confident stakeholder engagement and communication skills *Visa sponsorship is not available for this position More ❯
london (city of london), south east england, united kingdom
Taylor Root
the firm, including General Counsel, Information Security, and Emerging Tech Risk teams, helping to shape best practices and ensure compliance with regulations such as UK/EU GDPR, DORA, HIPAA, and EU AI Act. The role offers a dynamic mix of hands-on risk management, internal auditing, and strategic input into global processes. It’s ideal for someone with a … General Counsel on data sourcing and best practice Ideal Profile: 2–5 years’ experience in data protection, risk, or compliance Strong working knowledge of UK/EU GDPR, DORA, HIPAA, and ISO27001 Experience in professional services (law firm experience is a plus) Confident stakeholder engagement and communication skills *Visa sponsorship is not available for this position More ❯
Gloucestershire, England, United Kingdom Hybrid / WFH Options
Hays Specialist Recruitment Limited
information security compliance program. Conduct internal audits, third-party risk assessments, and due diligence reviews. Ensure alignment with regulatory and industry standards including ISO27001, NIST, SOX, GDPR, SOC 2, HIPAA, CCPA, LGPD. Collaborate with cross-functional teams across multiple jurisdictions to drive compliance initiatives. Identify gaps in security controls and recommend corrective actions. Maintain and update security policies, procedures, and … compliance, risk management, and audit. Strong understanding of international regulatory frameworks and standards. Hands-on experience with: ISO27001 audits and implementation GDPR compliance NIST cybersecurity framework SOX, SOC 2, HIPAA, CCPA, LGPD Ability to interpret complex regulatory requirements and translate them into actionable controls. Excellent communication and stakeholder engagement skills. Strong analytical and problem-solving capabilities. What We Offer: Competitive More ❯
as NIST 800-53 r5, NIST CSF2.0, CIS, ISO27K • Designing solutions related to advisory & consulting engagements around regulatory risk & compliances such as DORA, NIS2, GDPR, SOX ITGC, PCI-DSS, HIPAA, Data Privacy, NHS, FFIEC etc. • Develop knowledge base, re-usable components for GRC advisory services. • Responsible for development and enhancements of GRC services, team and delivery capabilities. • Manage local partners … technology risk assessments. ISO 27K, NIST, AI Governance, CIS etc. • Good compliance understanding of industry domains such as BFSI – (SOX, FFIEC, PCI-DSS, BASEL, MAS etc.), Healthcare & Life-sciences – (HIPAA, Hi-Trust, FDA CFR, GxP Compliance), Telecom, Retail, Data Privacy (GDPR, CCPA) Energy & Utilities (NERC, FERC) Information Security (ISO 27000, NIST, CIS) TPRM • Business Resiliency & Cyber Recovery, ZTA • GRC Project More ❯
london (city of london), south east england, united kingdom
HCLTech
as NIST 800-53 r5, NIST CSF2.0, CIS, ISO27K • Designing solutions related to advisory & consulting engagements around regulatory risk & compliances such as DORA, NIS2, GDPR, SOX ITGC, PCI-DSS, HIPAA, Data Privacy, NHS, FFIEC etc. • Develop knowledge base, re-usable components for GRC advisory services. • Responsible for development and enhancements of GRC services, team and delivery capabilities. • Manage local partners … technology risk assessments. ISO 27K, NIST, AI Governance, CIS etc. • Good compliance understanding of industry domains such as BFSI – (SOX, FFIEC, PCI-DSS, BASEL, MAS etc.), Healthcare & Life-sciences – (HIPAA, Hi-Trust, FDA CFR, GxP Compliance), Telecom, Retail, Data Privacy (GDPR, CCPA) Energy & Utilities (NERC, FERC) Information Security (ISO 27000, NIST, CIS) TPRM • Business Resiliency & Cyber Recovery, ZTA • GRC Project More ❯
as NIST 800-53 r5, NIST CSF2.0, CIS, ISO27K • Designing solutions related to advisory & consulting engagements around regulatory risk & compliances such as DORA, NIS2, GDPR, SOX ITGC, PCI-DSS, HIPAA, Data Privacy, NHS, FFIEC etc. • Develop knowledge base, re-usable components for GRC advisory services. • Responsible for development and enhancements of GRC services, team and delivery capabilities. • Manage local partners … technology risk assessments. ISO 27K, NIST, AI Governance, CIS etc. • Good compliance understanding of industry domains such as BFSI – (SOX, FFIEC, PCI-DSS, BASEL, MAS etc.), Healthcare & Life-sciences – (HIPAA, Hi-Trust, FDA CFR, GxP Compliance), Telecom, Retail, Data Privacy (GDPR, CCPA) Energy & Utilities (NERC, FERC) Information Security (ISO 27000, NIST, CIS) TPRM • Business Resiliency & Cyber Recovery, ZTA • GRC Project More ❯
Job Description Role – Principal Consultant Technology – Data Privacy Consulting Location – UK Business Unit – DNA Compensation – Competitive (including bonus) Job Description Infosys is seeking Consultant (Data Privacy SME) for its DNA Data Governance Unit. In this role, you will be part More ❯
Watford, Hertfordshire, United Kingdom Hybrid / WFH Options
Smith & Nephew
functional teams, contribute to AI governance, and help implement cutting-edge legal technologies. Whether it's supporting research and development for connected medical devices or advising on GDPR andHIPAA, your legal insight will help us deliver safe, compliant and innovative product and service solutions to patients and customers worldwide.Success in this role means being a proactive, commercially minded legal … 7+ years post-qualification experience in commercial contracting with a focus on IT/technology contracting and data privacy law Have strong knowledge of GDPR, UK Data Protection Act, HIPAAand other global privacy frameworks Demonstrate experience advising on digital health, AI, cloud services, and cybersecurity within a regulated industry Be confident working with senior stakeholders and translating complex legal More ❯
PAM Consultant - London Please Note: Due to the nature of client work you will be undertaking, you will need to be willing to go through a Security Clearance process as part of this role, which requires 5+ years UK address More ❯